Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.
RMC is hiring an Information Assurance Specialist to support our customer in Dahlgren, VA.
Roles and Responsibilities:
- Assist with the development of systems Cybersecurity documentation to support certification of compliance with applicable standards.
- Provide Cybersecurity oversight, direction, and guidance in support of attaining and maintaining ATOs through the Risk Management Framework (RMF) process.
- Ensure compliance with DoD and DON Cybersecurity compliance requirements.
- Ensure the uninterrupted delivery of information technology systems.
- Support current and ongoing C&A packages.
- Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities.
- Develop, review, and maintain mitigation statements for new and current security vulnerabilities.
- Review vulnerability and compliance scanning of all Navy Command networks and services using the current DoD Assured Compliance Assessment Solutions (ACAS) or other government solutions.
- Respond to Information Assurance Vulnerability Alerts (IAVAs) as necessary to address systems vulnerabilities.
- Run and review systems security utilization logs per Cybersecurity standards.
- Implement and support Cybersecurity standards to include NIST and Risk Management Framework (RMF) C&A Standards.
- Perform regular security systems scans and maintain records of such scans, as required by Cybersecurity guidelines.
- Assist in the preparation of Annual Security Review (ASR), Quarterly Security Review (QSR), and eMASS packages.
- Deploy Evaluate-STIG to all assets on the network to view results of applicable STIGs on every asset to ensure compliance.
- Utilize Visio to develop, update and maintain network diagrams.
- Review, update, validate and author Cybersecurity procedures (SOPs).
- Review and maintain an inventory of authorized software.
- Audit and validate configurations deployed on Laptops, Workstations, and Servers.
- Audit and validate configuration of network devices, systems, and applications based on DISA STIGs.
- Monitor, review, and report on data restoration capabilities.